如何通过ARM模板为不同资源组中的密钥库添加访问策略

"parameters": {
  "resourceGroupName": {
    "type": "string",
    "metadata": {
      "description": "The name of the resource group."
    }
  }
}

"parameters": {
  "keyVaultName": {
    "type": "string",
    "metadata": {
      "description": "The name of the key vault."
    }
  }
}

"resources": [
  {
    "type": "Microsoft.KeyVault/vaults/accessPolicies",
    "apiVersion": "2019-09-01",
    "name": "[concat(parameters('keyVaultName'), '/add')]",
    "properties": {
      "accessPolicies": [
        {
          "tenantId": "[subscription().tenantId]",
          "objectId": "[parameters('objectId')]",
          "permissions": {
            "keys": ["get", "list"],
            "secrets": ["get", "list"]
          },
          "condition": {
            "reference": {
              "keyVault": {
                "id": "[resourceId('Microsoft.KeyVault/vaults', parameters('keyVaultName'))]"
              }
            },
            "operator": "Equals",
            "value": "true"
          }
        }
      ]
    }
  }
]